Firewall & Security defaults
Below, please find listed the default configuration ports and endpoints as a guide to help ready your security on your platform.
The ports associated with the CCH Suite are set as defaults, however, it may occasionally be necessary to modify these ports. WKTAA can verify these settings as well as any potential variations.
CCH Central CSI Firewall and OneClick Firewall Exceptions
CCH Central Suite Installer [CSI], our installation mechanism, and TeamViewer as our Remote Installation Client will require access to the following Internet Endpoints
| Service | Port | URL |
| CSI Application | 80 TCP | http://cchinstaller.cloudapp.net |
| CSI Storage | 80 TCP | http://csistorage.blob.core.windows.net |
| CSI Web | 80 TCP | http://cchinstall.co.uk |
| Licensing Service | 443 TCP | http://cchinstall.co.uk |
| TeamViewer | 443 TCP | https://cchswlicencing.wolterskluwer.co.uk |
| TeamViewer | 80 TCP | *teamviewer.com |
| TeamViewer | 443 TCP | *teamviewer.com |
| *teamviewer.com | 5938 TCP & UDP | *teamviewer.com |
CCH OneClick will may require the following address to have filtering/access exceptions added to security products and Mbps supported by incumbent connectivity
| Item | Description | URL |
| Email notifications | notifications@accountantspace.co.uk | |
| Email notifications | reminders@accountantspace.co.uk | |
| Email notifications | *@wolterskluwercloud.eu | |
| Account Verification | noreply@wolterskluwercloud.com | |
| Website | Accountantspace Server | *.accountantspace.co.uk |
CCH OneClick will require access outbound via the following Ports and to the following Internet Endpoints
| Service | Port(s) | URL |
| CCH Portal Message Service | 80, 443, 50110, 5671, 9350, 9351, 9352, 9353, 9354 | |
| CCH Practice Portal Service | 80,443, 50110, 5671, 9350, 9351, 9352, 9353, 9354 | |
| CCH OneClick Accountantspace | *wolterskluwercloud.eu | |
| CCH OneClick Accountantspace | *wolterskluwercloud.com | |
| CCH Practice Portal Service | http://csistorage.blob.core.windows.net | |
| CCH Practice Portal Service | esigneu.wolterskluwer.com | |
| CCH Practice Portal Service | ocuksbstatic.blob.core.windows.net | |
| CCH Practice Portal Service | prod-compliance-db | |
| CCH Practice Portal Service | sb1.servicebus.windows.net | |
| CCH Practice Portal Service | prod-sb-pp.servicebus.windows.net | |
| CCH Practice Portal Service | prodsyncworker.blob.core.windows.net | |
| CCH Practice Portal Service | prodceonpremisequeues.queue.core.windows.net | |
| CCH Practice Portal Service | prodstorageonpremisesync.blob.core.windows.net |
Additional Service Endpoints
The following additional endpoints may be required, related to the modules licenced and utilised in CCH Suite
| Item | Description | URL |
| HMRC | api.service.hmrc.gov.uk | |
| HMRC | http://transaction-engine.tax.service.gov.uk | |
| ABBYY SDK 12 Licensing Service | 443 |
*.abbyy.com account.abbyy.com personal-cloud.abbyy.com license-cloud.abbyy.com us-license-cloud.abbyy.com admin-cloud.abbyy.com mail-cloud.abbyy.com payment-cloud.abbyy.com |
| CGT Gains Securities | 80, 443 | software.cch.co.uk/gains/sdb2008/securities.htm |
| iXBRL Review & Tag | 80, 443 | xmlgw.companieshouse.gov.uk/v1-0/xmlgw/Gateway |
| Twinfield | 80, 443 |
107.154.76.47 http://accounting.twinfield.com https://accounting.twinfield.com |
CCH Central Suite Internal Communication Ports
The CCH Central Suite will utilise these communication ports, as a minimum, between client machine and server
| Service | Port | Type |
| CCH Document WCF Service | TCP | |
| CCH Portal Service | TCP | |
| CCH Workflow Service | 443 | TCP |
| File and Printer Sharing (NB-Datagram-In) | 138 | UDP |
| File and Printer Sharing (NB-Name-In) | 137 | UDP |
| File and Printer Sharing (NB-Session-In) | 139 | TCP |
| File and Printer Sharing (SMB-In) | 445 | TCP |
| SQL Browser | 1434 | UDP |
| SQL Instance [Default] | 1433 | TCP |
| SQL Instance [Named] | Variable per your Instance | TCP |